And yet, with all of the pearl-clutching in this thread and countless others just like it, nobody seems to be able to point to any real-world exploits.

The threat is purely theoretical. The loss in performance is not.